Re: Sign key and export for each UID

2015-01-20 Thread Tobias Mueller
Hi. On Tue, Dec 02, 2014 at 05:04:58PM +0530, Robin Mathew Rajan wrote: > This shell script might help you. > [...] > http://mirror.roe.ch/rel/scripts/gpg/gpg-sign-keys.sh-25 hm. I understood that best practises include signing each UID separately rather than signing all UIDs on the key. I don't

Re: Sign key and export for each UID

2014-12-02 Thread Robin Mathew Rajan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello Tobi, :) This shell script might help you. (Semi)automatic GnuPG keysigning for busy people. Sign GPG keys, upload signatures to keyservers, and mail signed keys to their owner, including support for multiple private keys to sign with. All

Re: Sign key and export for each UID

2014-12-02 Thread Tobias Mueller
Hi. I'm digging up this thread because it asked the same question I have, but it hasn't really been answered: On Tue, Sep 17, 2013 at 06:23:35AM +, atair wrote: > Is there a way to achieve the same signatures from gpg command line? > For example > $ gpg -a --export > exports the complete key

Re: Sign key and export for each UID

2013-09-19 Thread Daniel Kahn Gillmor
On 09/18/2013 10:35 PM, Doug Barton wrote: > The issue for me is the "cleanliness" and accuracy of my local key ring > (as I pointed out in a previous message in this thread). I don't like > what either CAFF or Pius do; leave signatures that I consider "bogus" on > my local copy of the key, or rely

Re: Sign key and export for each UID

2013-09-18 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 09/18/2013 04:14 PM, MFPA wrote: | Hi | | | On Monday 16 September 2013 at 9:20:45 PM, in | , | Pete Stephenson wrote: | | |> I consider UIDs |> corresponding to no-longer-functioning email addresses |> to be invalid and won't sign them as I have

Re: Sign key and export for each UID

2013-09-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 16 September 2013 at 10:33:59 PM, in , Doug Barton wrote: > Like I said, reasonable minds can differ. I personally > don't find it all that burdensome to select the uids > that I am willing to sign when I get the responses > back. I

Re: Sign key and export for each UID

2013-09-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 16 September 2013 at 9:29:10 PM, in , Doug Barton wrote: > I take uids with no e-mail address on a case by > case basis. Good to hear that. Some people claim to have a blanket policy of not signing them. - -- Best regards MFPA

Re: Sign key and export for each UID

2013-09-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 16 September 2013 at 9:20:45 PM, in , Pete Stephenson wrote: > I consider UIDs > corresponding to no-longer-functioning email addresses > to be invalid and won't sign them as I have no idea if > the keyholder is the actual owner of t

Re: Sign key and export for each UID

2013-09-18 Thread Philipp Klaus Krause
Am 17.09.2013 02:09, schrieb Doug Barton: > On 09/16/2013 03:02 PM, Philipp Klaus Krause wrote: > | Unfortunately, tools for signing keys with multiple UIDs IMO are not > | user-friendly enough, tpically due to the following: > | > | 1) They require the user to be familiar with the command-line, >

Re: Sign key and export for each UID

2013-09-17 Thread Peter Lebbing
On 17/09/13 15:21, Daniel Kahn Gillmor wrote: > Again, please see Monkeysign [0] Thank you, bookmarking it now. That was the one I couldn't remember. Peter. -- I use the GNU Privacy Guard (GnuPG) in combination with Enigmail. You can send me encrypted mail if you want some privacy. My key is av

Re: Sign key and export for each UID

2013-09-17 Thread Daniel Kahn Gillmor
On 09/16/2013 06:02 PM, Philipp Klaus Krause wrote: > Unfortunately, tools for signing keys with multiple UIDs IMO are not > user-friendly enough, tpically due to the following: > > 1) They require the user to be familiar with the command-line, > 2) They require the user to run a unixoid OS, > 3)

Re: Sign key and export for each UID

2013-09-17 Thread Peter Lebbing
On 17/09/13 00:02, Philipp Klaus Krause wrote: > 1) They require the user to be familiar with the command-line, I've "found" the GUI tool that I mentioned: http://lists.gnupg.org/pipermail/gnupg-users/2013-September/047407.html My biggest feature request for caff is Debian Bug 680136[1]: Additio

Re: Sign key and export for each UID

2013-09-17 Thread atair
> See section "Multiple-UID keys" on > http://www.phildev.net/pgp/gpgsigning.html > wich was written by the author of pius. Thanks! That's what I looked for. >> BTW: I'm on GNU/Linux for some years now and I'd never use Windows >> again ;) So personally, I don't care whether these tools exist for

Re: Sign key and export for each UID

2013-09-16 Thread Philipp Klaus Krause
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 17.09.2013 08:23, schrieb atair: > On 9/16/13, Doug Barton wrote: >> The way that your signer did it is _a_ standard way to do it. >> CAFF is a very popular program for that, and there is another >> here that is also pretty good: >> http://www.phil

Re: Sign key and export for each UID

2013-09-16 Thread atair
On 9/16/13, Doug Barton wrote: > The way that your signer did it is _a_ standard way to do it. CAFF is a > very popular program for that, and there is another here that is also > pretty good: http://www.phildev.net/pius/news.shtml Is there a way to achieve the same signatures from gpg command line

Re: Sign key and export for each UID

2013-09-16 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 09/16/2013 03:02 PM, Philipp Klaus Krause wrote: | Unfortunately, tools for signing keys with multiple UIDs IMO are not | user-friendly enough, tpically due to the following: | | 1) They require the user to be familiar with the command-line, | 2)

Re: Sign key and export for each UID

2013-09-16 Thread Philipp Klaus Krause
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 16.09.2013 23:18, schrieb Ingo Klöcker: > On Monday 16 September 2013 11:57:04 Doug Barton wrote: >> The way that your signer did it is _a_ standard way to do it. >> CAFF is a very popular program for that, and there is another >> here that is also

Re: Sign key and export for each UID

2013-09-16 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 FYI, the signature on your message did not verify for me in thunderbird, although others you have sent do. On 09/16/2013 02:18 PM, Ingo Klöcker wrote: | On Monday 16 September 2013 11:57:04 Doug Barton wrote: |> The way that your signer did it is _

Re: Sign key and export for each UID

2013-09-16 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 09/16/2013 12:45 PM, MFPA wrote: | Hi | | | On Monday 16 September 2013 at 7:57:04 PM, in | , Doug Barton wrote: | |> I send encrypted e-mail to each uid with a pseudo-random string |> and ask the person to send me back the string in a signed |>

Re: Sign key and export for each UID

2013-09-16 Thread Ingo Klöcker
On Monday 16 September 2013 11:57:04 Doug Barton wrote: > The way that your signer did it is _a_ standard way to do it. CAFF is > a very popular program for that, and there is another here that is > also pretty good: http://www.phildev.net/pius/news.shtml > > I have another philosophy that works f

Re: Sign key and export for each UID

2013-09-16 Thread Doug Barton
On 09/16/2013 01:20 PM, Pete Stephenson wrote: On Mon, Sep 16, 2013 at 9:45 PM, MFPA wrote: On Monday 16 September 2013 at 7:57:04 PM, in , Doug Barton wrote: I have another philosophy that works for me because I prefer not to sign uids that are not valid. What, in your opinion, makes a UID

Re: Sign key and export for each UID

2013-09-16 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 16 September 2013 at 7:57:04 PM, in , Doug Barton wrote: > I have another philosophy that works for me because I > prefer not to sign uids that are not valid. What, in your opinion, makes a UID "not valid?" > I send > encrypted e

Re: Sign key and export for each UID

2013-09-16 Thread Peter Lebbing
On 16/09/13 15:32, atair wrote: > I also discovered, that there's a sign, lsign, > ... in the interactive mode with --edit-key -- what are they for/how > do they differ from normal --sign? sign is for signatures that can be exported to other people and to keyservers. lsign is for local signatures,

Re: Sign key and export for each UID

2013-09-16 Thread Pete Stephenson
On Mon, Sep 16, 2013 at 9:45 PM, MFPA wrote: > On Monday 16 September 2013 at 7:57:04 PM, in > , Doug Barton wrote: >> I have another philosophy that works for me because I >> prefer not to sign uids that are not valid. > > What, in your opinion, makes a UID "not valid?" I can't speak for Doug, b

Re: Sign key and export for each UID

2013-09-16 Thread Doug Barton
On 09/16/2013 06:32 AM, atair wrote: Hi all, I'm now in the situation to sign one other's key for the first time. He signed mine some days ago and sent me an email "Your PGP key " to each UID of my key with an attached file "..signed-by-.asc". I know that I can use --sign to sign the key and the

Sign key and export for each UID

2013-09-16 Thread atair
Hi all, I'm now in the situation to sign one other's key for the first time. He signed mine some days ago and sent me an email "Your PGP key " to each UID of my key with an attached file "..signed-by-.asc". I know that I can use --sign to sign the key and then --export to export it, but I don't kn